Skill collection
trailofbits/skills-curated agent skills
- skills
- 24
- official
- 24
- GitHub stars
- 513
GitHub description: “Curated, community-vetted Claude Code plugin marketplace”
- Stars
- 513 (35 forks)
- Licence
- CC-BY-SA-4.0
- Last push
- Jul 2026
- Created
- Feb 2026
Install all skills
npx skills add trailofbits/skills-curatedAdd --skill <name> for a single skill and -a <agent> to choose the agent (see the agent guides).
Skills in trailofbits/skills-curated, ranked
Ranked by score. Sort bymost stars,trending,newest,recently updated
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. | trailofbits/ | 513 | 5 repos | ~2.2k | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 2 | A skill your agent uses when the task involves reading, creating, or editing .docx documents, especially when formatting or layout fidelity matters; prefer python-docx plus the bundled… | trailofbits/ | 513 | 5 repos | ~786 | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 3 | A skill your agent uses when the agent is building or iterating on a web game (HTML/JS) and needs a reliable development + testing loop: implement small changes, run a Playwright-based test script… | trailofbits/ | 513 | — | ~2.3k | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 4 | A skill your agent uses when the user asks to create, scaffold, or edit Jupyter notebooks (.ipynb) for experiments, explorations, or tutorials; prefer the bundled templates and run the helper script… | trailofbits/ | 513 | — | ~1k | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 5 | A skill your agent uses when the task requires automating a real browser from the terminal (navigation, form filling, snapshots, screenshots, data extraction, UI-flow debugging) via playwright-cli… | trailofbits/ | 513 | — | ~945 | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 6 | Searches X/Twitter for real-time perspectives, dev discussions, product feedback, breaking news, and expert opinions using the X API v2. | trailofbits/ | 513 | — | ~1.9k | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 7 | Teaches the user a new skill or concept over multiple sessions, using the current directory as a stateful teaching workspace with lessons, learning records, and reference materials. | trailofbits/ | 513 | 27 repos | ~2.6k | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 8 | A skill your agent uses when tasks involve reading, creating, or reviewing PDF files where rendering and layout matter; prefer visual checks by rendering pages (Poppler) and use Python tools such as… | trailofbits/ | 513 | 9 repos | ~669 | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 9 | Perform language and framework specific security best-practice reviews and suggest improvements. | trailofbits/ | 513 | 9 repos | ~2.2k | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 10 | Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. | trailofbits/ | 513 | 9 repos | ~1.4k | Automated safety check: Pass | CC-BY-SA-4.0 | 2 mo ago |
| 11 | A skill your agent uses when the user explicitly asks for a desktop or system screenshot (full screen, specific app or window, or a pixel region), or when tool-specific capture capabilities are… | trailofbits/ | 513 | — | ~2k | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 12 | Use only when the user explicitly asks to stage, commit, push, and open a GitHub pull request in one flow using the GitHub CLI (gh). | trailofbits/ | 513 | 6 repos | ~474 | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 13 | Generates PDF documents using the React-PDF library (@react-pdf/renderer) with TypeScript and JSX. | trailofbits/ | 513 | — | ~3.1k | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 14 | Researches a topic from the last 30 days on Reddit, X, and the web. | trailofbits/ | 513 | 1 repo | ~4.3k | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 15 | Remove signs of AI-generated writing from text. An agent skill from trailofbits/skills-curated. | trailofbits/ | 513 | — | ~3k | Automated safety check: Pass | CC-BY-SA-4.0 | 2 mo ago |
| 16 | Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. | trailofbits/ | 513 | — | ~1.7k | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 17 | Deploy web projects to Netlify using the Netlify CLI (npx netlify). | trailofbits/ | 513 | — | ~1.7k | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 18 | A skill your agent uses when tasks involve creating, editing, analyzing, or formatting spreadsheets (.xlsx, .csv, .tsv) using Python (openpyxl, pandas), especially when formulas, references, and… | trailofbits/ | 513 | — | ~1.3k | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 19 | Implements file-based planning for complex multi-step tasks. | trailofbits/ | 513 | — | ~1.5k | Automated safety check: Pass | CC-BY-SA-4.0 | 2 mo ago |
| 20 | Extracts reusable skills from work sessions. An agent skill from trailofbits/skills-curated. | trailofbits/ | 513 | — | ~1.9k | Automated safety check: Pass | CC-BY-SA-4.0 | 2 mo ago |
| 21 | A skill your agent uses when a user asks to debug or fix failing GitHub PR checks that run in GitHub Actions; use gh to inspect checks and logs, summarize failure context, draft a fix plan, and… | trailofbits/ | 513 | — | ~955 | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 22 | A skill your agent uses when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry health data via the Sentry API; perform read-only queries with… | trailofbits/ | 513 | — | ~744 | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 23 | Teaches agents to recognize and avoid security threats during normal activity. | trailofbits/ | 513 | — | ~1.5k | Automated safety check: Notes | CC-BY-SA-4.0 | 2 mo ago |
| 24 | Reference for writing and editing agent skills well — the vocabulary and principles that make a skill predictable. | trailofbits/ | 513 | — | ~2.5k | Automated safety check: Pass | CC-BY-SA-4.0 | 2 mo ago |
Questions, answered from the data.
What is the best skill in trailofbits/skills-curated?
Openai Security Ownership Map (official) from trailofbits/skills-curated ranks first of the 24 skills in trailofbits/skills-curated listed here, with the highest score: its repository has 513 GitHub stars, 5 other GitHub owners carry a copy, its SKILL.md loads about 2.2k tokens and it has informational notes only in the automated safety check. Next come Openai Doc and Openai Develop Web Game.
Are the skills in trailofbits/skills-curated official?
24 of the 24 skills in trailofbits/skills-curated are official, published by the vendor's own GitHub organization: Openai Security Ownership Map, Openai Doc, Openai Develop Web Game, Openai Jupyter Notebook, Openai Playwright and 19 more.
How do I install all skills from trailofbits/skills-curated?
Run npx skills add trailofbits/skills-curated in your project: the open-source skills CLI installs the repository's skills into your coding agent's skills folder. To install a single skill, open its page here for the exact command.
How are these skills ranked?
By Skill Navigator score, which combines the GitHub stars of the skill's repository (shared across that repo's skills and discounted for large collections), how many other GitHub owners carry a copy of the skill, and automated SKILL.md quality checks, minus penalties for safety-check warnings and for each further skill from the same repository. Skills that fail the safety check are not listed.